General

  • Target

    Payload.exe

  • Size

    7.7MB

  • MD5

    3012f7d9d3aaa0e5592a524ded36153f

  • SHA1

    61b13dc818674c23c6f48eb5ea597baa409f9ac2

  • SHA256

    290fcae25f19fa7dd9bd08ac559f74412b12253e5194b6afe104377e013cd654

  • SHA512

    46b73bbcb613f3c7b11af76eb03f641683a2371bb68d6296d812d6ffc6700a0c17ba116dd4347a726453ce6357c447379787659700a01b2cd8ffdc0ead97c22f

  • SSDEEP

    196608:i++HiA6lsvawADaS3KH1UU/pSYs+l7HOM81XwOSzZjs:i+cOGawAD53am0QYsEqrREjs

Score
10/10

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

Victim

C2

oxy01.duckdns.org:6522

Mutex

8c47e740704afa553c0acf7809e56295

Attributes
  • reg_key

    8c47e740704afa553c0acf7809e56295

  • splitter

    Y262SUCZ4UJJ

Signatures

Files

  • Payload.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections